1

Hello all,

It’s come to that time where i really need to get off the ServiceDesk and pick up a defined role within IT Sector! I’ve worked in IT for 9 years on the SD and it’s not dried up for me with no Progression and job satisfaction !!!

I’m very keen in the Security Side of things and i have a love for Linux and Pen testing tho I’m no wiz at this subject " Pen Testing "

What i would like to know is what would be the best courses for me to start to help me get to where i want to with regards to It Security?

I’ve been doing my CCNA ICDN 1 & 2 and I’m going to do the Exams sometime this summer " 2019 "

I’d like to say I’m very comfortable with using Cmd Line on Linux and i have been using Kail Linux but again no Pro!!

I’d just like someone to put me on the right path so i don’t waste hrs of doing online courses and exams that’s not going to benefit me.

Any advice would be great!

Thanks,

James T

18 Spice ups
2

Well first things first - I’m going to be honest with you. You’ve been in IT for 9 years and it sounds to me like you’ve mastered Service Desk, which is fantastic. It doesn’t sound like you’ve best utilized your time to learn other skills, however. Obviously everybody’s journey is different but the second I started my first Help Desk gig I was doing everything in my power to learn what I needed to get out of it. You and I both know there is downtime in Help/Service Desk roles. You have busy days, sure… but there is always downtime. Use that downtime to start learning your way out of that role.

As for the next job? That’s entirely up to you but I’d shoot for a Systems Administration role, even if it’s a Junior role. From there you can branch out to Security if that’s your passion. You could also branch to hardcore Networking, further administration, or even delve into development if you really wanted to. Here are some areas of focus when it comes to learning:

  • Active Directory. You should be proficient in AD, specifically “Users and Computers” and “Group Policy Management.” You will be spending a LOT of time in AD.
  • Exchange. Whether it’s on-prem or something like 365, you’ll want to learn it.
  • Powershell, batch, etc… you’ll want to be super comfy in the CLI and have some scripting experience. A lot of your job will involve automating via script or doing tasks which require CLI because the options are not available in the GUI.
  • Servers, servers, servers, server. You need to live, eat, and breath servers. That includes physical and virtual servers (VMWare, XenServer 5.x, Hyper-V, etc)

In the meantime, include yourself on any projects you can. Even if you aren’t super knowledgable in them… include yourself and learn. Try to do more with servers and AD if you are able. Other than that, learn learn learn. After work, go home and watch Youtube tutorials, hangout on Spiceworks and explore the Learn section of the site, or just take courses on sites like Pluralsight.

7 Spice ups
3

A natural progression would typically be to apply for an IT engineering position. Some of the best cloud, infrastructure, Linux, security, storage and Windows engineers I’ve worked with in the past 10-15 years moved up the same way.

I’d focus less on certifications and more on Linux so you can further develop security skills along the way…

1 Spice up
4

You have some experience, the next thing is to focus on what you’re looking to do. You’ll want to learn more about servers. Specifically stuff like securing servers, permissions etc. I’d learn Linux and Windows. As for using Kali, that’s the predominant pentesting distro. You’re still going to want to become more familiar with the different roles of servers in the environment. If you’re looking at getting some basic security stuff, I’d go for Sec+ at a minimum. One of the most fundamental parts of security is going to be understanding networks, which is a good thing in regards to getting the CCNA.

You may also want to learn and associate with other security folks in your area. You can do this via various groups (like ISC2, SANS, ISACA, even Defcon). Some of these provide good training classes that happen at the meetings, but the most important thing to gain from that is networking with other professionals in your area.

2 Spice ups
5

learn perl

6

Perl? Seriously? If I was going for any language with experence with Linux I’d go for Python. Bash is also handy. If you’re going the windows ruite, as well or on it’s own go with Powershell.

3 Spice ups
7

Powershell: as a security team, there are plenty of bash scripters; but as recently as yesterday we needed to compare 6 groups in batches of 3, give me all the users from these three groups, and all the users from these three groups and compare them. Bash doesn’t do that well natively, so as the resident Powershell guy, I was asked to accomplish it. You should be able to do that.

I have been asked to resolve our entire IP Blacklist, not wanting to do it by hand I got some Spiceworks help writing my Powershell script that does it.

2 Spice ups
8

Hi dimforest, I’ve learned many things and i do hold a 1st BSc Hons in Computer Networks! i do have a few Certs on other courses. But i will look more into the Linux admin role and powershell ! Thanks for your feedback!!

James

1 Spice up
9

Apply for a position as a Sysadmin/ Network admin and spend the next 7 - 10 years managing and maintaining a network and server infrastructure. After that, you should be competent enough to specialize in handling the security end of things. Good luck!

10

Seems like a pretty big jump from service desk to sys admin.

If you want to learn a lot quickly, working for a MSP with multiple clients will get you exposed to a lot of tech and varying environments faster than anything.

Keep in mind that most security jobs aren’t that glamorous, nothing like the movies or tvs. You’ll probably spend a lot of time reading publications and adapting those procedures into documents and then into the physical implementation.

11

Also, get yourself a lab. Doesn’t need to be physical or even a “real” server. Virtualization levels the playing field.

GNS for networking, ESXi, Hyper-V, KVM, or XCP-ng. Heck, even VirtualBox on your Windows computer is a decent starting point–> https://community.spiceworks.com/how_to/157612-virtualbox-all-in-one-windows-ad-lab?from_category=22

12

Thanks for all the comments means a lot to me! I’m kinda jack of all trades in IT but not master in any , if that makes sense? I can happily config an layer 3 switch work on SANS sotrage and many other things that I currently do but as for qualification the highest I have is Bsc Hons computer networking. What I need to do is work for a corporate finance company as I’m sure their will be better opportunities for me to branch out to!!

I just need to decide WHAT I’d like to specialise in and stick to it !!

Like I said earlier, I’m happy as pig in *hit with Linux and quite confident using Cisco switches etc! I’ll look more in to Linux administrator roles and see what I need !

Again thanks for the information and the kick up my ass :+1:t4:

Best regards

James